Agent exit execution for self-procured services

Every product in the sector helps an agent join a service; nobody helps it leave one. When your agent procured a tool seat, hosted MCP plan, or API tier and it is time to go, leaving is a human-shaped obstacle course — retention flows with no API, data trapped in the departing service, prepaid balances that evaporate, and credentials left live at a vendor the fleet no longer uses. This product executes the departure end-to-end as one dependency-probe-gated, proof-carrying procedure: a live-usage probe (agents, tasks, and hibernation capsules) returns SAFE-TO-EXIT or DEPENDENTS-FOUND before anything is touched; data and artifacts are exported and hash-verified before the account closes; save-offers are unit-normalized and decided by your pre-set policy; the credential is actively tested dead after cancellation — or the receipt says UNTESTABLE, never asserted; and prepaid balances are recovered or written off on the record — all bundled into one signed exit receipt that doubles as a rejoin claim. Proven in the lab: 22/22 tests, sweep matched ground truth exactly (9/9 unused services, $178.00/mo, 8 live credentials), $48.00 in balances recovered, capsule-only dependents caught before closure.

Prices

• Per-exit API $5.00/exit (x402, Base USDC) — one API-shaped exit, full signed receipt. First exit free, one time per operator.
• Operator $19/mo per operator — up to 20 API-shaped exits/mo + portfolio unused-service sweep.
• Assisted exit $25.00/exit — one human-shaped retention flow navigated under principal policy; always per-exit, never inside the Operator allowance.

Start

POST /register {"operator": "your-name"} returns a per-customer token (shown once). POST /trial claims the one-time free first API-shaped exit. POST /policy sets your principal exit policy (save-offer rules + rejoin policy). GET /sweep (Operator plan) finds unused services in your portfolio register. POST /probe {"service_id": "..."} returns SAFE-TO-EXIT / DEPENDENTS-FOUND. POST /exits {"service_id": "...", "mode": "execute"|"rehearse"} runs the exit in the proven order and returns the signed receipt; API-shaped exits meter trial → Operator quota → $5.00 x402; human-shaped exits are Assisted at $25.00 x402. POST /subscribe {"plan": "operator"} with a verified x402 payment starts the Operator subscription. POST /procure checks a service against your exit receipts (rejoin claim). POST /verify-receipt verifies a receipt's signature publicly. MCP JSON-RPC at POST /mcp (tools: exit_sweep, exit_probe, exit_execute, exit_verify_receipt, exit_rejoin_check). Machine docs: /openapi.json, /llms.txt, /.well-known/x402, receipt-key fingerprints at /verify-key, terms at /terms, privacy at /privacy.

Limits (stated plainly)

• Demand and unused-spend value were unmeasured at diligence time and were measured only on the Lab's seeded portfolio in the lab; production sweeps run against the operator's own portfolio register and the production-footprint yield is measured there, not claimed from the sandbox.
• 56% of unused services in the lab portfolio were human-shaped. Real-browser assisted-navigation timing remains unmeasured — the lab proved the assisted walk as a state machine; per-exit navigation seconds are recorded on every assisted receipt (navigation_s) so the measurement accumulates in production.
• Revocation testability is per vendor: in the lab census 10/12 seeded vendors were testable and 2 UNTESTABLE. A receipt for an untestable vendor carries credential_dead=null and status UNTESTABLE — a revocation is never asserted dead without a test.
• An exit recorded COMPLETE with a still-live credential, a post-closure extraction, or a receipt claiming an untested revocation is a stop-the-line defect by design: the gates fail closed (dependents abort untouched, hash mismatch aborts before cancellation, still-live revocation returns FAILED-REVOCATION-LIVE and registers no rejoin claim).
• Trial identity is normalized (case/whitespace-insensitive): a second account for the same operator does not re-grant the trial.
• Legal/IP state (as of ship date): patentability LEGAL-185 verdict NARROW (FILE-NARROWED core) and freedom-to-operate LEGAL-186 verdict AMBER — ship proceeds under the screens' keep-clear conditions (no session-signalling revocation surface; no credential-status-via-other-credential service).
• Lost-token recovery is a manual step via support@textforagents.com.

Support: support@textforagents.com · Provider: TextForAgents LLC